Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6faa2a4e-e8db-40ee-93e4-68ca556e6880.roa
File:                     6faa2a4e-e8db-40ee-93e4-68ca556e6880.roa (raw, json)
Hash identifier:          Thk591Vxa02KDN2CiuYIWHw5OjRmIo5YTNpw+BP4OFQ=
Subject key identifier:   96:95:B9:93:71:55:20:25:09:A1:FA:A3:41:9E:D3:55:A5:91:61:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C5F8E603162D8B6CC7B2F83ACC822784D050499
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6faa2a4e-e8db-40ee-93e4-68ca556e6880.roa
Signing time:             Wed 15 Oct 2025 18:21:10 +0000
ROA not before:           Wed 15 Oct 2025 18:21:10 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5f:8e:60:31:62:d8:b6:cc:7b:2f:83:ac:c8:22:78:4d:05:04:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 18:21:10 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=818e4163d7ba6572904bbfdc47470ed99a4ee3775a96434c00b78f029aee0c79, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:8c:07:28:e5:3e:b1:ac:c3:c6:34:cb:9a:
                    74:fa:ba:93:2d:0c:60:65:98:b4:f2:bc:0a:a7:7a:
                    52:18:46:af:f0:63:ef:6e:3c:d9:a8:48:cb:28:7f:
                    fd:e4:39:7f:49:16:d1:55:ac:20:10:5b:e2:ce:ad:
                    bb:75:86:90:06:3c:5e:cb:c3:f2:5c:7c:ea:81:7d:
                    1f:41:fb:f1:ab:e5:c5:b3:af:4b:3d:81:0b:92:a8:
                    1b:73:4f:25:c9:92:3b:85:82:f7:b5:87:29:e3:0c:
                    5d:c8:49:28:ba:a8:c7:2a:29:fc:98:62:22:4f:3f:
                    5c:84:cd:6d:8c:35:4b:11:95:3c:ae:d6:24:f6:bd:
                    82:7b:7d:2e:1c:c9:2e:74:39:98:69:4e:47:80:cd:
                    ae:5b:24:7d:7f:9b:a0:b4:7a:ed:1b:ab:af:6b:c3:
                    93:38:dc:72:f9:27:40:90:40:79:38:46:97:b5:36:
                    65:d7:1f:99:a2:2d:b0:90:83:d0:86:e0:22:68:9d:
                    bc:db:48:69:a3:1a:1c:3d:36:36:5f:bc:db:3f:dd:
                    25:ef:30:79:c5:85:13:97:27:c4:a4:58:51:98:57:
                    59:e9:ee:46:06:93:f2:de:12:6b:ac:b7:95:f7:0c:
                    b1:a4:81:2e:83:63:f1:d0:45:52:4f:b1:d4:76:1e:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:95:B9:93:71:55:20:25:09:A1:FA:A3:41:9E:D3:55:A5:91:61:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6faa2a4e-e8db-40ee-93e4-68ca556e6880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:aa:c7:3f:b9:0f:04:5b:4e:8a:88:4c:82:8a:05:6a:63:15:
         b4:5e:64:67:fd:c4:23:01:57:ab:d6:db:5b:a3:dd:25:1c:26:
         dc:8f:10:d3:f5:6b:16:4e:a4:53:fc:39:60:7a:3e:fb:7a:4b:
         a8:5c:73:fa:27:67:fa:bb:ea:dc:fd:4c:fe:ef:f1:6f:5e:92:
         80:20:59:33:f9:9e:76:cf:7a:6c:23:b9:13:b1:3a:f7:20:4a:
         fc:f8:ee:6c:e9:8c:6c:78:30:df:ef:b2:8d:42:03:da:46:6c:
         29:d9:09:8d:ab:32:dc:66:b2:b9:2b:1e:2e:41:f3:13:e1:be:
         6f:56:c1:32:93:96:08:cb:5a:8f:a3:cb:95:55:f6:d8:48:77:
         b1:6d:f3:39:7e:7d:ea:f2:e6:5f:cb:0a:a5:e6:10:f4:d8:9a:
         e7:b4:ac:56:34:19:4e:0a:88:54:aa:b3:89:75:e7:a5:06:9d:
         68:3c:4c:ec:dc:66:2c:f7:36:bb:5c:b7:7e:a8:8f:2d:ff:14:
         2d:01:26:af:ce:30:9b:b1:5f:1c:4e:c1:96:ae:ae:40:68:78:
         4a:31:d0:25:fd:e7:de:43:70:c5:4f:1a:98:76:17:03:b2:b1:
         fc:61:73:65:61:e1:76:2b:62:3d:e2:fc:a7:a2:d3:be:d5:65:
         97:d6:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----